Most severe vulnerabilities for "oracle communications policy management" 12.5.0

redhat/xstreamXStream is vulnerable to a Remote Command Execution attack

Risk 86

Severity

9.9

OS Command Injection, Code Injection

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

A flaw was found in xstream. A remote attacker, who has sufficient rights, can execute commands of the host by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2021-21345

Apache strutsApache Struts Remote Code Execution Vulnerability

Risk 99

Severity

9.8

Exploited

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

1 / 2

First published (updated )

CVE-2020-17530

redhat/xstreamXStream is vulnerable to an Arbitrary Code Execution attack

Risk 89

Severity

9.8

Malicious File Upload

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in xstream. A remote attacker may be able to execute arbitrary code only by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2021-21350

redhat/xstreamXStream is vulnerable to an Arbitrary Code Execution attack

Risk 89

Severity

9.8

Malicious File Upload

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in xstream. A remote attacker can load and execute arbitrary code from a remote host by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2021-21346

redhat/xstreamXStream is vulnerable to an Arbitrary Code Execution attack

Risk 89

Severity

9.8

Malicious File Upload

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in xstream. A remote attacker may be able to load and execute arbitrary code from a remote host only by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2021-21347

redhat/xstreamXStream is vulnerable to an Arbitrary Code Execution attack

Risk 89

Severity

9.8

Malicious File Upload

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A flaw was found in xstream. A remote attacker may be able to load and execute arbitrary code from a remote host only by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2021-21344

Apache strutsApache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag…

Risk 86

Severity

9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

First published (updated )

CVE-2019-0230

redhat/xstreamRemote Code Execution in XStream

Risk 83

Severity

9.3

OS Command Injection

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

A flaw was found in xstream. An unsafe deserialization of user-supplied XML, in conjunction with relying on the default deny list, allows a remote attacker to perform a variety of attacks including a remote code execution of arbitrary code in the context of the JVM running the XStream application. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 5

Remedy

Depending on the version of XStream used there are various usage patterns that mitigate this flaw, though we would strongly recommend using the allow list approach if at all possible as there are likely more class combinations the deny list approach may not address. Allow list approach ```java XStream xstream = new XStream(); XStream.setupDefaultSecurity(xstream); xstream.allowTypesByWildcard(new String[] {"com.misc.classname"}) ``` Deny list for XStream 1.4.13 ```java xstream.denyTypes(new String[]{ "javax.imageio.ImageIO$ContainsFilter" }); xstream.denyTypes(new Class[]{ java.lang.ProcessBuilder.class }); ``` Deny list for XStream 1.4.7 -> 1.4.12 ```java xstream.denyTypes(new String[]{ "javax.imageio.ImageIO$ContainsFilter" }); xstream.denyTypes(new Class[]{ java.lang.ProcessBuilder.class, java.beans.EventHandler.class, java.lang.ProcessBuilder.class, java.lang.Void.class, void.class }); ``` Deny list for versions prior to XStream 1.4.7 ```java xstream.registerConverter(new Converter() { public boolean canConvert(Class type) { return type != null && (type == java.beans.EventHandler.class || type == java.lang.ProcessBuilder.class || type == java.lang.Void.class || void.class || type.getName().equals("javax.imageio.ImageIO$ContainsFilter") || Proxy.isProxy(type)); } public Object unmarshal(HierarchicalStreamReader reader, UnmarshallingContext context) { throw new ConversionException("Unsupported type due to security reasons."); } public void marshal(Object source, HierarchicalStreamWriter writer, MarshallingContext context) { throw new ConversionException("Unsupported type due to security reasons."); } }, XStream.PRIORITY_LOW); ```

First published (updated )

CVE-2020-26217

redhat/xstreamA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

Risk 69

Severity

9.1

SSRF

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Last updated 22 August 2024

1 / 3

Source: Ubuntu

First published (updated )

CVE-2021-21342

redhat/xstreamXStream is vulnerable to an Arbitrary Code Execution attack

Risk 75

Severity

9.1

Malicious File Upload

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Last updated 22 August 2024

1 / 3

Source: Ubuntu

First published (updated )

CVE-2021-21351

maven/com.fasterxml.jackson.core:jackson-databindFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 80

Severity

8.8

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2020-36180

maven/com.fasterxml.jackson.core:jackson-databindFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 80

Severity

8.8

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2020-36182

maven/com.fasterxml.jackson.core:jackson-databindFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 80

Severity

8.8

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2020-36179

maven/com.fasterxml.jackson.core:jackson-databindFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 80

Severity

8.8

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2020-36181

maven/com.fasterxml.jackson.core:jackson-databindFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 80

Severity

8.8

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 3

First published (updated )

CVE-2020-36184

redhat/xstreamA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

Risk 51

Severity

8.6

SSRF

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Last updated 22 August 2024

1 / 3

Source: Ubuntu

First published (updated )

CVE-2021-21349

maven/com.fasterxml.jackson.core:jackson-databindCode Injection

Risk 77

Severity

8.1

Code Injection

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).

1 / 2

Source: MITRE

First published (updated )

CVE-2020-24616

maven/com.fasterxml.jackson.core:jackson-databindA flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gad…

Risk 78

Severity

8.1

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 3

First published (updated )

CVE-2020-35728

maven/com.fasterxml.jackson.core:jackson-databindFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 78

Severity

8.1

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2020-36188

maven/com.fasterxml.jackson.core:jackson-databindFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 77

Severity

8.1

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2020-36183

maven/com.fasterxml.jackson.core:jackson-databindFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 77

Severity

8.1

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2020-36185

maven/com.fasterxml.jackson.core:jackson-databindFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 77

Severity

8.1

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2020-36186

maven/com.fasterxml.jackson.core:jackson-databindFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

Risk 77

Severity

8.1

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 3

First published (updated )

CVE-2020-36187

maven/com.fasterxml.jackson.core:jackson-databindFasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadg…

Risk 78

Severity

8.1

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.6. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and system availability.

1 / 4

First published (updated )

CVE-2020-24750

redhat/springframeworkRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application

Risk 71

Severity

8

XSS

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

A flaw was found in springframework in versions prior to 5.0.16, 5.1.13, and 5.2.3. A reflected file download (RFD) attack is possible when a "Content-Disposition" header is set in response to where the filename attribute is derived from user supplied input. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

1 / 4

First published (updated )

CVE-2020-5398

redhat/xstreamXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)

Risk 46

Severity

7.8

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 22 August 2024

1 / 3

Source: Ubuntu

First published (updated )

CVE-2021-21348

linuxfoundation Dojo Node.jsPrototype pollution in dojo

Risk 56

Severity

7.7

Code Injection

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or pollute, a JavaScript application object prototype of the base object by injecting other values. This has been patched in versions 1.12.8, 1.13.7, 1.14.6, 1.15.3 and 1.16.2

First published (updated )

CVE-2020-5258

redhat/xstreamXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

Risk 45

Severity

7.5

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Last updated 22 August 2024

1 / 3

Source: Ubuntu

First published (updated )

CVE-2021-21343

Apache strutsAn access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when pe…

Risk 43

Severity

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file upload.

First published (updated )

CVE-2019-0233

redhat/mysqlVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Suppo…

Risk 45

Severity

6.5

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data.

External References:

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL

1 / 2

Source: Red Hat

First published (updated )

CVE-2017-3633

Trending

Don't miss critical vulnerabilities

Remedy

Don't miss critical vulnerabilities

Don't miss critical vulnerabilities

Don't miss critical vulnerabilities

Don't miss critical vulnerabilities

Don't miss critical vulnerabilities

Company

Resources

Contact